General

  • Target

    0eb34b4215e71f1089dda8186bce570fad84a11e944e7308aa59f7c06353a2d7N.exe

  • Size

    76KB

  • Sample

    241130-xbk5ha1mhs

  • MD5

    fce9f1b087d1e9d225ae7a62e924c600

  • SHA1

    3e8f30a12a44e60c928163b9aa6b07934e70b12a

  • SHA256

    0eb34b4215e71f1089dda8186bce570fad84a11e944e7308aa59f7c06353a2d7

  • SHA512

    943e072de7b00d48cf81d39a0db9d75d777847279fa0a6fee58c2da886adacebb82dab0bcbf3e9ed216b28ffadbd70fef8c558d9d5a51fc4857b98ad4695948c

  • SSDEEP

    1536:gd9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:AdseIOKEZEyF6EOFqTiQm5l/5s11

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0eb34b4215e71f1089dda8186bce570fad84a11e944e7308aa59f7c06353a2d7N.exe

    • Size

      76KB

    • MD5

      fce9f1b087d1e9d225ae7a62e924c600

    • SHA1

      3e8f30a12a44e60c928163b9aa6b07934e70b12a

    • SHA256

      0eb34b4215e71f1089dda8186bce570fad84a11e944e7308aa59f7c06353a2d7

    • SHA512

      943e072de7b00d48cf81d39a0db9d75d777847279fa0a6fee58c2da886adacebb82dab0bcbf3e9ed216b28ffadbd70fef8c558d9d5a51fc4857b98ad4695948c

    • SSDEEP

      1536:gd9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:AdseIOKEZEyF6EOFqTiQm5l/5s11

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks